The Maximum or Minimum Number 
of Rational Points on Curves 
of Genus Three over Finite Fields 

Kristin Lauter 
with Appendix by Jean-Pierre Serre 

Abstract 

We show that for all finite fields ¥ q , there exists a curve C over ¥ q of 
genus 3 such that the number of rational points on C is within 3 of the 
Serre-Weil upper or lower bound. For some q, we also obtain improve- 
ments on the upper bound for the number of rational points on a genus 3 
curve over F„. 



1 Introduction 

More than half a century ago, Andre Weil proved a formula for the number of 
rational points, N(C), on a smooth projective algebraic curve C of genus g over 
a finite field ¥ q . This formula, along with his proof of what is referred to as 
the Riemann hypothesis for curves, provides upper (resp. lower) bounds on the 
maximum (resp. minimum) number of rational points possible 

q + 1 - 2.9V? <N<q+l + 2g^q. 

There are many cases in which the Weil upper and lower bounds cannot be 
attained. Some are trivial: for example when the bound is not an integer. Also, 
when the field size, q, is small with respect to the genus, g, the lower bound 
will be negative and thus cannot be attained. In Serre made a non-trivial 
improvement to the Weil bound (which we will refer to hereafter as the Serre- 
Weil bound): 

q + 1 — gfn < N < q + 1 + gm, m = [2y/q\ , 

and introduced the explicit formulae method to provide better bounds for large 
genus. Since then there has been considerable interest in determining the actual 
maximum and minimum, (cf. @, g, @, @, f§, |§ J§, §> @> @> 
|0, @, @, 0, @, |) 

In the present paper we are concerned with the following question which was 
posed in p2|: for which genus, g, is the difference between the upper bound and 
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the actual maximum N q (g) bounded as q varies? For genus 1 and any q, the 
difference is either or or 1 (|p9[). For genus 2, Serre determined N q (2) for all 
q, and showed that the difference from the Serre- Weil bound is always less than 
or equal to 3 (pi]); for genus 3, he determined the maximum for q < 25 (p3[|). 
The present paper is devoted to showing that for genus 3 and all q, either the 
maximum or the minimum is within 3 of the Serre- Weil upper or lower bound. 

The techniques involved in the proof of the main theorem include Serre's 
theory of hermitian modules as well as "glueing" of polarizations on abelian 
varieties. The theory of hermitian modules is detailed in the Appendix. This 
theory provides an equivalence of categories between abelian varieties over ¥ q 
which are isogenous to a product of copies of an ordinary elliptic curve, and 
torsion-free modules of finite type over a ring which is defined in terms of the 
Frobenius of the elliptic curve. A polarization on the abelian variety then trans- 
lates to a hermitian form on the module. Thus the classification of hermitian 
forms over rings can be used to determine the existence or non-existence of the 
corresponding polarized abelian variety. 

To determine whether there is a curve whose number of points is close to 
the Weil bound, we first make a list of the possible zeta functions for such a 
curve as in [ fL3| . The numerator of the zeta function of a curve is given by 
the characteristic polynomial of Frobenius acting on the Jacobian of the curve. 
From Tate's theorem we know that the isogeny type of an abelian variety over 
a finite field is determined by the characteristic polynomial of Frobenius. For 
each zeta function, we investigate the corresponding isogeny type using the 
equivalence of categories provided by Serre's theory. Since not all Jacobians of 
curves we consider are isogenous to the product of one elliptic curve with itself, 
we are naturally led to consider the glueing of polarizations on abelian varieties 
of different isogeny types. In some cases, the glueing is possible; in others, it is 
not. When it is not, we obtain improvements on the upper bounds. In all cases 
we are able to conclude by making use of the Torelli theorem in dimension 3 
that there exists a curve whose number of points is within 3 of the Serre- Weil 
upper or lower bound. 

Serre invoked the theory of hermitian modules to treat the genus 2 case in 
[ p2| and ^3|, but did not give details. In the full proof of the genus 2 
case is given, including more explanation of the equivalence of categories. More 
recent work on this subject was done by Everett Howe ( || ) , who translated the 
notion of principal polarization working with Deligne's more general equivalence 
of categories. The notion of the glueing of polarizations on abelian varieties has 
also been employed by several authors recently for various purposes (Q, [Q). 

The proof of the main theorem of this paper is divided into cases which 
correspond naturally to the existence or non-existence of indecomposable her- 
mitian forms over certain rings of a given discriminant. In each case we treat 
finite fields ¥ q with q of a special form, which leads to a number of interesting 
diophantine problems. 

The paper is organized as follows: Section 2 contains the statement of the 
main theorems of the paper. Section 3 contains a description of how the theory 
of hermitian modules will be used in the proofs of the main theorems and also 
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recalls the short list of possible zeta function for curves with the number of 
points under consideration. Section 4 contains the proofs of the main theorems. 

Acknowledgements I would like to thank J-P. Serre for his letters on 
hermitian modules which inspired this project, and for his generous help and 
time spent working on it. This paper is based on work supported by a Mentoring 
Grant from the Association for Women in Mathematics. I would also like to 
thank Jim Milne and Rene Schoof for helpful discussions and Fritz Beukers for 
the reference to Apery's paper. 

2 Statement of Results 

Let q — p e , with p prime, e > 1. By a curve over the finite field ¥ qi we mean 
a smooth, projective, absolutely irreducible curve. For such a curve, C, let 
g = g(C) denote the genus, and N = N(C) denote the number of rational 
points over ¥ q . 

Definition For fixed g and q, let N q (g) (resp. M q (g)) denote the maximum 
(rcsp. minimum) of N(C) as C runs through all curves of genus g over ¥ q . 

Throughout we write q = p e uniquely in the form 

q = x 2 + x + a, 

where x is the largest integer whose square is less than or equal to q, and a is 
an integer such that 

—x < a < x. 
Let m = and d = m 2 — Aq. Note that 

_ ( 2x if -x < a < 0, 
m ~ 1 2x + 1 if < a < x, 



and 

-&(x + a) if —x < a < 0, 
1 - 4a if < a < x. 
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Theorem 1 Suppose q = x 2 +x + a, a=l or a = 3, with a < x. Then 

N q (3) <g+l + 3m-3 

and 

M q (3) >q + l-3m + 3. 
Furthermore, there exists a curve C of genus g(C) — 3 over ¥ q such that 

|JV(C)-(g + l)|=3m-3. 
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Note 2.1 For example if we write q = 5 in the form q = x 2 + x + 3, with 
x = 1 and a = 3, then x is not the greatest integer part of the square root of q 
and a does not satisfy the inequality a < x; so instead we write q in the form 
q = x 2 + 1, a = —1. Nor do we write q = 9 in the form g = x 2 + x + 3, since it 
would not satisfy a < x. 

Theorem 2 Suppose q = x 2 + b,b=l or 6 = 2, wif/i a = b — x satisfying 
—x < a < 0. Then N q (3) < q + I + 3m — 2. Furthermore, there exists a genus 
3 curve C over ¥ q such that 

|JV((7)-(g + l)| = 3m-2. 

Note 2.2 For example q = 3 is no£ of the form q — x 2 + 2 with 2 < a;; instead 
it is of the form q — x 2 + x + 1 . 

Together, Theorems |l| and || can be used to establish the following result. 

Theorem 3 For any prime power q = p e , there exists a curve C of genus 
g(C) — 3 over ¥ q such that 

\N(C) - > 3m -3. 

In other words, Theorem ||| says that for all q, at least one of the following holds: 

i. |g + l + 3m-iV 9 (3)| < 3, 

ii. |g + l-3m-M,(3)| < 3. 

3 Background 

3.1 Hermitian modules 

In the Appendix, Serre gives an equivalence between the following two cate- 
gories: the category of abelian varieties over ¥ q which are isogenous over ¥ q to 
a product of copies of E, where E is an ordinary elliptic curve over ¥ q ; and the 
category of torsion-free i?d-modules of finite type, where Rd = Z[7r], tt is the 
Frobenius of E, and d = a 2 — 4q, where #E(¥ q ) = q + 1 — a. The equivalence 
holds under the assumption that d is the discriminant of an imaginary quadratic 
field. In that case, Rd is equal to the ring of integers in the field; thus it is a 
Dedekind domain, and the modules under consideration are projective. If d is 
not the discriminant of an imaginary quadratic field, then Rd is an order in 
the ring of integers. Although the equivalence of categories does not necessarily 
hold under those conditions, we will still use the same notation and make use 
of the functor S given in the Appendix. In most cases there will be no conflict 
with the notation from Section 2 since we will let a = m; in all other cases, 
we will use the notation d' . The condition that E be ordinary is equivalent to 
requiring that a be prime to p. Throughout the paper we will use the notation 
E rn to denote an elliptic curve with q + 1 + m points over the field ¥ q . 
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In Section 5 of the Appendix, polarizations on abelian varieties are translated 
into positive definite hermitian forms on _R-modules, and the polarization is 
principal if and only if the hermitian form has discriminant 1 . The Jacobian of 
a curve has a canonical principal polarization which corresponds to the theta 
divisor. For an absolutely irreducible curve, the theta divisor is irreducible, so 
the canonical polarization corresponds to an indecomposable hermitian module 
with discriminant 1. 

We will use this correspondence in two directions. In cases where we can 
show that there is no indecomposable hermitian module of discriminant 1, we 
can conclude that no curve of that type exists. In cases where we find an 
indecomposable hermitian module of discriminant 1, we can use the theorem of 
Torelli in its precise form (see the Appendix to [jl3| ) to conclude that a curve of 
that type (or of the opposite type) exists. 

3.2 Zeta functions 

In each case, we identify the zeta function of the curve we are searching for. 
The zeta function determines the isogeny type of the Jacobian of the curve. 

Definition 1 A curve has zeta function of type [xi,...x g ] if 

Xi = -(ai + di), i = l,...,g, 

where {ai,di} is the family of g conjugate pairs of eigenvalues of Frobenius 
acting on the Jacobian of the curve over ¥ q . 

Definition 2 A curve C has defect k if N(C) = q + 1 + gm — k. m = [2y/q]. 

Fact 3.1 (Defect 0) We recall from that a curve which meets the Serre-Weil 
bound has zeta function of type [to, to, to]. When g = 3, by statement 7.1 in 
the Appendix, there does not exist a curve of type [to, to, to] if 

d = m 2 - 4<? = -3, -4, -8, or - 11. 

Fact 3.2 (Defect 1) We recall from [^3| that a curve whose number of points is 
equal to q + gm must have g < 2. 

Fact 3.3 (Defect 2) We recall from @ or (l3j that if the fractional part of 2^/q, 
(which we denote by {2^/q}), satisfies {2y/q} < V3 — 1, (g ^= 4), then a curve 
whose number of points is equal to q + gm — 1 is of type [to, to, to — 2]. 

4 Proofs of Theorems 

This section is organized as follows. We will prove the theorems from Section 
2 in the order they were stated. For each possible zeta function to be treated 
via the equivalence of categories, we must check the condition that the trace 
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be relatively prime to the characteristic, and deal with special cases where this 
fails. 

To begin, we notice that except for one special case (q — 2), none of the 
fields in Theorems |l| and ^| have characteristic 2. 

Fact 4.1 If q — p e , e > 1, then p ^ 2 if q is of any of the following forms: 

i. q = x 2 + l, 

ii. q = x 2 + 2, 

iii. q = x 2 + x + 1, 

iv. q — x 2 + x + 3. 

Proof: In case i, if q were a power of 2 then x would be odd, and so 

x 2 = 1 (mod 8), 

which implies q = 2 (mod 8). Thus q = 2, e = 1 is the only possibility. 
In case ii, x would be even, and we would have 

x 2 = (mod 4), 

which implies q = 2 (mod 4). 

In cases iii. and iv, x 2 + x is always even, so q is odd. □ 

4.1 Proof of Theorem |T] 

Write q = p e = x 2 + x + a, a = 1 or a — 3, with a < x. Then m = 2x + 1, and 
d = —3 for a = 1, and e? = —11 for a = 3. 

Proposition 1 If q is of the form q = p e = x 2 + x + a, a = 1 or a = 3, a < x, 

then m is prime to p unless q = 3. 

Proof: a=l. Write q=p e = x 2 +x + l with rn = 2x + 1. Suppose p divides 
m. Then 

p e = mx — (x 2 — 1) 

implies that p divides (a; 2 — 1). If p divides (x + 1), then p divides x, which is 
impossible. So p divides (x — 1). Thus p also divides (x + 2) and 3. But Nagell 
and Ljunggren (see |1S|] , for example) have shown that the only solution to 

p e = x 2 + x + 1, e > 3, e odd, 

is p = 7, e = 3, a; = 18. So no odd power of 3, e > 3, is of the form x 2 + x + 1. 
So = 3 is the only exception. Indeed in that case m = 3. 

a=3. Write q — p e = x 2 + x + 3 and m = 2x + 1. Again suppose p divides m. 
Then p e — 3m ~ x(x — 5) is divisible by p. We cannot have p divides x since then 
we would also have p divides (x + 1). So in fact, p divides (x — 5). In addition, 
2p e — mx = x + 6 is divisible by p. Thus we must have p = 11. However, there 
are no solutions to the equation ll e = x 2 + x + 3 since there are no solutions 
modulo 5. □ 
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Proposition 2 If q is of the form q = p e = x 2 + x + a. a = 1 or a = 3, a < x, 

then m — 2 is prime to p unless q — 343 or possibly p = 5. 

Proof: a=l. Write q = p e = x 2 +x + l with to = 2x + 1. Suppose p divides 
m - 2. Then 

2p e - (m - 2)x = 3x + 2 

implies that p divides 3a; + 2 and x + 3 and a; — 4. So p = 7. If e = 1, then p = 7 
does not divide 2x — 1. If e is odd, e > 3, then due to the result of Nagell and 
Ljunggren cited above, the only solution is p = 7, e = 3, x = 18. In that case, 
p = 7 divides 35, so q = 343 is an exception. a=3. Write q = p e = x 2 + x + 3 

and m = 2x + 1. Again suppose p divides m — 2. Then 

(m-2) 2 -4p e = -8x- 11 

is divisible by p, and so is 8x — 4, which implies that p divides 15. If p = 3, then 
the only powers of p, e odd, which are of the form x 2 + x + 3 are 3 and 3 5 = 243. 
This can be proved (as Serre pointed out to me) by Skolem's ^-adic method 
with £ = 5 (in pfj], Skinner attempted to give an £-adic proof with I = 11, but 
his argument is incomplete). Neither q = 3 nor q = 243 satisfy the divisibility 
condition "3 divides 2x — 1" . It would not be necessary to exclude p = 5 in the 
hypotheses if there are no solutions to the equation 5 e = x 2 + x + 3 with e > 3, 
e odd and 5 dividing 2a; — 1. I have checked with the help of pari that there are 
no solutions for e < 1600. □ 



4.1.1 q=3 

To prove Theorem first consider the case q — 3. If q = 3, then m = 3, and the 
explicit formula bound is N(C) < 10. In fact, a curve C of genus 3 and defect 
3 over F3 with N(C) = 10 = q + 1 + 3m — 3 was given in with the equation 

3 4 2 

y — y = x — x . 
Its zeta funtion is of type [m, to, to — 3]. 

4.1.2 q^3 

By Fact 3.1, defect is not possible because there is no indecomposable rank 3 
Hermitian module of discriminant 1 when d = —3 or d = —11 (cf. (^]). By Fact 
3.2, defect 1 is never possible for g > 2. 

Proposition 3 If q is of the form q — p e — x 2 + x + a, a=l or a ~ 3 with 
a < x, then a defect 2 curve of genus 3 is of type [m, m,m — 2]. 

Proof: By Fact 3.3, it suffices to check that the fractional part of 2^/q satisfies 
{2^/q} < \/3 — 1. Suppose that {2^fq\ > V3 — 1. We can write 

{2i/q} = {\/4x 2 +4a; + 4a} = \J Ax 2 + 4x + 4a - (2x + 1), 



7 



so 

\Aa: 2 + Ax + Aa > 2x + V3 

and then 

4a - 3 > 4x(V3-l). 

For a = 1, this implies x = 0, which is not possible. For a = 3, this implies 
£ < 3, which does not occur for any q. (See Note 2.1). □ 

Proposition 4 There is no indecomposable rank 2, Hermitian module of dis- 
criminant 2 over Rd when d = — 3 or d = —11. 

Proof: Since the class number of i?^ is 1, projective i?^ modules are free, so 
we can express the module P and the Hermitian form H as a matrix whose r/ t/l 
entry is H(ei,ej) where {ei} is a basis for P over A change of basis will 
give an equivalent matrix. We will work with the matrix in a reduced form. A 
rank 2 Hermitian form in "reduced" form can be written as 

A a 
a [i 



with < A < /j £ Z, a e Rd- The condition that H(x,y) = H(y,x) implies 
that A, /i £ Z, and we assume that e\ is chosen with A minimal so that A < fi. 
We are interested in Hermitian forms which are positive definite, so A > 0. 
The proof of the proposition relies on the following lemma: 

Lemma 1 If d is square-free, satisfies d = 1 (mod 4) and Rd has class number 
one, then we can find a basis for P over Rd such that the matrix for a Hermitian 
form in reduced form satisfies 

ad , \d\ + 1., 1 

— < (- — ■ ) — 

A 2 ~~ 4 ' \d\ 

Proof: If is too large, we can replace a by a + Xr for any r <G Rd by replacing 
the basis element e-2. by e' 2 — e2 + fe\. As a complex number, 



(a + Xr)(a + Xr) = \(a + Xr)\ 2 , 
and |A| = A, so it suffices to show that r can be chosen so that 

'A 1 " 1 4 ' \d\ 

So it is enough to show that for every z <G C, there exists an element r e R d such 
that the distance squared from z to r is less than the bound. A Z- basis for Rd 
is {1, 1+ 2 v/ ^ }. We look for the point in the complex plane which is furthest from 
a lattice point, or in other words, the smallest radius so that circles centered 
at the lattice points will cover the plane. It suffices to consider points in the 

right triangle with vertices (0, 0), (5,0), (5, -^^), since we can then extend the 
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argument by symmetry to the rest of the fundamental domain. We look for 
the point (i, a) in the triangle which is equidistant from the two lattice points, 



(0,0) and Setting 



— a = 



+ a 2 



wc find 



a = 



(Ml - 1) i 



Calculating the distance squared from this point to the origin we find exactly 
the bound stated in the lemma, and this point is the furthest possible distance 
away from the closest lattice point, c.q.f.d. 
Suppose that X^i — act — 2. The form 



1 
2 



is decomposable. If A = 1, then 



- / /N + 1, 2 1 

aa - ( 4~ ) |df 



_9_ 

11 



if d = -3 



if d= -11, 



which implies that a — a — and thus \i — 2. So it suffices to show A = 1. 
Suppose A > 2. For d = -3, 

2 + aa 2 A 
^^^A + 3' 

which is less than A if A > 2. This contradicts the fact that A < /i. For d = —11, 



A 2 < Xfj, = 2 + aa < 2 + — A 2 . 



Thus A 2 < 11, so A = 2 or 3. 
If A = 2, then 



and since 



aa = (mod 2), 



aa 

"T <1 > 

we have aa = 2 or aa = 0. But 2 is not the norm of an element of i2_n, so 
aa = a = 0. Then we must have fj, = 1, and this contradicts A < \i. 
If A = 3, then 

9 

aa<—9< 8. 

But then 3^ = 2 + aa < 9 implies that fi = 3 and aa = 7. Again this is 
impossible since 7 is not the norm of an element of i?_n. □ 



9 



Note 4.1.2 Proposition ^ can also be deduced from the results of Otremba (see 
[fl8|). In that paper, she proves (via the mass formula) that some hermitian 
forms are "alone in their genus" ; i.e. any lattice which is locally isomorphic 
to the given one is globally isomorphic. See especially (for rank 2) p. 9 and 
p. 13. These computations imply Proposition |], provided one checks that every 
lattice with discriminant 2 is in the same genus as the decomposable one (the 
1,2 lattice, in Otremba's notation). 

4.1.3 Glueing criteria 

The following section is translated from ^5|. Suppose that B and C are two 
polarized abelian varieties over a perfect field k 

b: B -> B* and c : C -> C* . 

Suppose that the polarizations have the same degree, n, and that n is prime to 
the characteristic, p, of k (if the characteristic is ^ 0). Denote by N b and iV c 
the kernels of b and c; these are finite etale group schemes of order n 2 . We will 
identify them with their k points. The Galois group G = Gal(k/k) operates on 
these groups. 

Let a be the group of roots of unity, written additively. According to Mum- 
ford, [|L4j, p. 227] the polarizations b and c define non-degenerate, alternating 
bilinear forms on N b and N c , with values in /x, and compatible with the action 
of G. We will denote them by (x, y) i— > (x, y). Let / be a map 

/ : N b -> iV c 

verifying the following conditions: 

1 . f is an isomorphism of G -modules; 

2. (f(x)J(y)) = -(x,y) for all (x,y) g N b x N b . 

To the data (B, 6, C, c, /) given above, we can now associate an abelian variety, 
A, isogenous to B x C , equipped with a polarization a of degree 1 as follows: 

Let B x C have the polarization which is the product of the polarizations b 
and c. The kernel of B x C — > B* x C* is N b x N c . Let F be the subgroup of 
this kernel which is the graph of the isomorphism /. Property (2) above shows 
that F is totally isotropic; property (1) shows that F is stable by the action of 
G, i.e. that it is a finite etale /c-subgroup of B x C. According to Mumford Q, 
the polarization onSxC passes to the quotient by F. In other words, if we 
set A = (B x C) I F , there exists a polarization a on A such that (6, c) factors 
through a 

B x C -> A^ a A* -► B* x C*. 

Comparing the degrees, we see that deg(a) = 1, so a is principal. 

This is how we obtain a polarized abelian variety A by "glueing" (_B, b) to 
(C, c) via /. 
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4.1.4 q 7^ 3 continued 

The general framework for the glueing of polarized abelian varieties can be 
applied in both backwards and forward directions. The following theorem works 
in the backwards direction ( "unglueing" ) . 

Theorem 4 Suppose q — p e ,q^3,q^ 343, p / 5 and that q is of the 
form q — x 2 + x + a, a = 1 or a = 3 with a < x. Let m = [2y/q\, d — 
to 2 — 4q. Let A be an abelian variety over ¥ q isogenous to E m x E m x E m -2 
which has an indecomposable principal polarization. Then there exists a rank 
2 indecomposable positive definite hermitian form of discriminant 2 on Z[ir], 

_ — m+ yd 
TT = p-. 

Proof: We have that m = 2x + 1 and Propositions [l] and || show that the 
assumptions of the theorem imply that m and m — 2 are prime to the charac- 
teristic. In fact, the restriction p ^ 5 is not necessary if there are no solutions 
to the equation 5 e = x 2 + x + 3 satisfying e > 3, e odd and 5 dividing 2x — 1. 

So all abelian varieties in this proof are ordinary. Due to Fact 4.1, we also 
know that 2 is prime to the characteristic, so the group schemes we work with 
will be etale. Thus we will identify finite group schemes with their F g -points. 
In the cases at hand, we have d — —3 or d = — 11, so in particular, d is the 
discriminant of an imaginary quadratic field of class number one. 

By the equivalence of categories given in the Appendix, it suffices to show 
that the indecomposable principal polarization on A induces an indecomposable 
polarization on E m x E m of degree 2, where E m is an elliptic curve with q+l — m 
points over ¥ q . 

Let F be the Frobenius endomorphism on A and V the Verschiebung, so 
that 4> = F + V has eigenvalues —to, —to, —to, —to, — (to — 2), — (to — 2). Let 



B = the connected component of the kernel of <fi + to, 



and 



C = the connected component of the kernel of 4> + to — 2. 
Then since Q(>/d) has class number one, 



B ~ E m x E m 

and 

C ~ -Em-2- 

We have A is isogenous to B x C 

f:(BxC)^A, 

with kernel A isomorphic to the intersection of B and C, A ~ B n C. The 
polarization A on A induces polarizations b on B and c on C . It suffices to show 
that b is indecomposable of degree 2. 
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Let Nb = Ker(6), N c — Ker(c). Together (6, c) is the induced polarization 
on B x C, with kernel Nj, X jV c , and so we must have 

Bn c c TVfc x tv c , 

embedded diagonally. We want to show that Nb has order 4. 

By the definition of B and C, we know that B n C is killed by 2, so it is 
contained in C[2], which has order 4. In addition, Bfl C is stable under the 
action of Frobenius, so it is an i?-module, where R = Z[tt] = Z[x]/ (x 2 — mx + q). 
But (2) is inert in R, so R/2R ~ F 4 . So B n C is an F^vector space of order 
less than or equal to 4. B <~) C cannot be trivial, or else A would be split and 
the polarization would be decomposable. So B n C must have order 4 and 
the polarization (b, c) has degree 4. Since B n C is embedded diagonally into 
Nb x N c , it follows that iV& has order 4. 

In addition, i? is orthogonal to C with respect to the skew-symmetric bilinear 
pairing (, ) defined by the polarization of A on the ^-adic Tate module associated 
to A. This follows from the fact that cj> is hermitian with respect to the pairing, 
since 

(f>* = (F + vy = F* + V* = V + F = </>. 

Thus for elements b € TiB and c S TiC of the €-adic Tate modules associated 
to B and C, we have 

2(6, c) = (6, 2c) = (b, (<P + m)c) = ((</> + m)b, c) = 0. 

This shows that they are orthogonal since Zg(l) is torsion- free. Thus B n C is 
maximal isotropic with respect to the pairing. 

Finally, the polarization b is indecomposable, else A would not be. □ 

Corollary 1 There are no defect 2 curves in genus 3 over ¥ q if q is of the form 
q = x 2 + x + a, a = 1 or a = 3 tw'f/i a < x. 

Proof: This is a direct consequence of Propositions || and [| and Theorem [|. 
The exceptional cases can be handled individually. If q = 3, there is no defect 
2 curve (see Section 4.1.1). If q = 343, then m — 2 = 35, so there is no elliptic 
curve over ¥ q with trace ±(m — 2). Thus there is no curve of type [m, m,m—2] 
over F343. Similiarly, if a solution to the equation 5 e = x 2 + x + 3 exists with 
e > 3, e odd and 5 dividing 2x — 1, then a curve of type [m, m, m — 2] over Fs= 
would fail to exist for the same reason. 

Thus we have established that N q (3) < q + 1 + 3m — 3 for such q. To finish 
the proof of Theorem [l], we must show that there exists a curve C of genus 
g (C) = 3 over F g such that \N(C) - (q + 1)| = 3m - 3. 

Proposition 5 Let q = p e = x 2 + x + a, a = 1 or a — 3, ™£/i a < x, and 
g 7^ 3, q ^ 3°. TTien i/iere exists a curve C of genus g(C) — 3 over ¥ q with zeta 
function of type ±[m — 1, m — 1, m — 1] . 
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Proof: Define d' — (m - l) 2 - 4q. Recall that 



d = m 2 - Aq = -3 or - 11. 
We first show that (m — 1) is prime to p and 

d'£ {-3,-4,-8,-11}. 

To check that (m — 1) is prime to p, write m — 1 = 2x. By Fact 4.1 we know 
that p ^ 2. So if p divides (m — 1) then p must divide x. For p e = x 2 + x + 1 
this is impossible. If p e — x 2 + x + 3 and p divides x, then p = 3. As explained 
in Proposition ||| above, the only powers of 3, e odd, of the form 3 e = x 2 + x + 3 
are 3 and 3 5 = 243. 

To show that d' ^ {—3, —4, —8, —11} we write d' — d— 2m+l, where d = —3 
or d = —11. If d = —3, then 

ff = -2m - 2. 



So d! G {—3, —4, —8, —11} only if m — 1 or m — 3, which occurs only for 9 = 3, 
m = 3. Indeed, we assumed that g ^ 3, since in that case [to — 1, to — 1, m — 1] 
is not possible. If cf = — 11, then 

<f = -2m - 10, 

which is not in the set {—3, —4, —8, —11} for any m > 1. 

Now we can apply the theory of Hermitian modules. By Theorem 8.2 in 
there exists an indecomposable, positive definite, unimodular Hermitian 
module over Rd> of rank 3. Applying the functor S from the Appendix to this 
module, we obtain an abelian variety A isogenous to E m —i x E m —\ x E m —\ 
with an indecomposable principal polarization. Then by the Torelli theorem 
(cf. [l3| , Appendix), there exists a genus 3 curve X over ¥ q whose Jacobian 
is isomorphic cither to A or to the quadratic twist of A; hence X is of type 
±[m — 1, m — 1, m — 1] . □ 

Note 4.1.4 Indeed if q = 243, there is no curve of type ±[m — 1, m — 1, m — 1] 
since m — 1 = 30, and Honda- Tate theory shows that there is no abelian variety 
of dimension 3 over F243 corresponding to that trace of Frobenius. 

Corollary 2 For q = 7 or q = 13, we have N q (3) = q + 1 + 3rn — 3. 

Proof: This was noted in 24 1. It follows from Proposition ||and the fact that 
a Frobenius with the opposite sign is not possible because the corresponding 
curve would have a negative number of points. 

Proposition 6 Let q = 3 5 = 243. Then there exists a curve C of genus 3 over 
¥ q with \N(C) -(q+ 1)| = 3m - 3. 
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Proof: The only possible zeta function for defect 3 in this case is [m, m, m— 3]. 
Since m = 31 is prime to 3, there exist elliptic curves E m and E m ^. Take the 
polarization 6 on _B = _E m x £" m of discriminant 3 given by the matrix 

"2 1 " 
1 2 ' 

For the polarization on C = E m -z we take 3 times the canonical polarization. 
To glue B to C we must find an isomorphism of the kernels of 6 and c as group 
schemes, and since the order is not prime to the characteristic, it is not enough 
to consider F g -points. The kernel of B is isomorphic to the 3-torsion of E m . So 
both kernels are of (etale, local) type: Z/3Z x /13 (twisted), and there is only 
one choice for the pairing up to sign. □ 

Note 4.1.5 An explicit search for a genus 3 curve over F243 with the maximum 
or minimum number of points currently seems out of reach. Even counting the 
points on each of the approximately 243 6 homogeneous plane quartics in the 
variables x 2 , y 2 , z 2 using the naive method would take 3 40 steps. A computation 
of this size is currently infeasible. A more fruitful approach may be to generate 
the equations of the elliptic curves E m and E m -3, which we can easily do, and 
to try to glue them together explicitly. 

4.2 Proof of Theorem |2] 

Suppose q = x 2 + b, 6=1 or 6 = 2 with b satisfying b < x. Again by Fact 3.1 
there are no defect curves since d = —4 or —8. By Fact 3.2, defect 1 curves 
do not exist for g > 2. It follows that 

N q {3) <q+l + 3m-2. 

It remains to show that there exists a curve C over ¥ q such that \N(C) — (q+l)\ = 
3m- 2. 

Proposition 7 Suppose q = x 2 + b, 6=1 or 6 = 2 with b satisfying 6 < x. 
Then {m,p) = 1 and (m — 2,p) = 1 unless q = 2. 

Proof: By Fact 4.1, p is not equal to 2 unless e = 1. Suppose that q ^ 2. Write 

m = 2x and m — 2 = 2(x — 1). 

If p divides m, then since p ^ 2 we have p divides x, which is not possible for 
either 6 = 1 or 6 = 2. 

If p divides (m — 2), then p must divide (x — 1). If 6 = 1, then this is 
impossible since 

p e = (x-l)(x + l) + 2 

and p ^ 2. If 6 = 2 and p divides (x — 1), then p divides (q — 3), so p = 3. But 
there are no solutions to the equation 

q = 3 e = x 2 + 2, 



14 



meeting the congruence condition 



x = 1 (mod 3) 



with e > 1, since by |jl|] there exist at most two solutions to such an equation 
and in this case they are e = 1, x = 1 and e = 3, x = 5. The second solution 
does not satisfy the congruence condition and the first solution does not matter 
since we do not write q = 3 in the form x 2 + 2 (See Note 2.2). 

4.2.1 q=2 

When q = 2, a curve C of genus 3 and defect 2 over F 2 was given in [Q. Its 
equation is: 



and it has 7 points, which is defect 2 since m = 2. It has zeta function of type 

7T 27T 37T 

[m+ 1 - 4cos 2 (y),m + 1 - 4cos 2 ( — ),m + 1 - 4cos 2 ( — )]. 
This is possible because 



and it is the only zeta function possible for this case. It is a twist of the Klein 
curve which becomes isomorphic to the Klein curve over the field F 2 7 . 

It is interesting to note that when q = 2, the zeta function type [m, m, m — 2] 
is not possible because the curve would have 7 points over F 2 but only 1 point 
over F 8 . Alternatively, we can show that the glueing of the supersingular elliptic 
curves is not possible by examining the group schemes in question and showing 
there is no isomorphism between them. 

The zeta function type [m,m+ V3 — 1, m — V3 — 1] is not possible because 
the curve would have 7 points over F 2 but only 5 points over F4. 

4.2.2 q^2 

Now assume q ^ 2. In order to have a genus 3 curve of type [m, m, m — 2] , there 
must exist an indecomposable Hcrmitian module of rank 2 and discriminant 2 
over Rd- When d = —4 or d = —8, an indecomposable Hermitian module of 
rank 2 and discriminant 2 exists and is given for d = —4 by 



x y + y z + z x + x y + y z + z x + x yz + y xz = u 



2V2>l-4cos 2 (^), 



2 

1 -i 



l + i 
2 



and for d = —8 by 
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In both cases, the module is indecomposable because all the values taken by the 
Hermitian form are divisible by 2, so 1 is not represented. But if the form were 
equivalent to 

"1 " 

2 J ' 

then 1 would be represented. 

The next theorem shows that in this case it is possible to glue two abelian 
varieties together to obtain the Jacobian of a genus 3 curve with the desired 
property. 

Theorem 5 Suppose q = x 2 +j,j = l or j = 2 with j satisfying j < x, and 
suppose q =/= 2. Then there exists an abelian variety A over ¥ q , isogenous to 
E m x E m x E m —2, with an indecomposable principal polarization. 

Proof: By Fact 4.1, the characteristic of the field is not equal to 2, and by 
Proposition [?|, there exist abelian varieties B — E m x E m and C = E m -2. 

j=l. Let b be the polarization on B corresponding to the positive definite 
indecomposable Hermitian module 

2 l + i ' 
1-i 2 

Let c be two times the canonical polarization on C. It has kernel equal to the 
2-torsion of C. We proceed by calculating the kernel of b and then glueing it 
to the kernel of c. The order of (the ¥ q points of) these group schemes is 4, 
which is prime to the characteristic. By Mumford's criteria, we need to find an 
isomorphism of the Galois modules which is an anti-isometry with respect to 
the pairings. If necessary, we will replace C by an isogenous elliptic curve. 

The kernel of b is E m [A] x E m [A] , where E m [A] is the A-torsion of E m , and 
A = l + i. The A-torsion of the elliptic curve is contained in the 2-torsion, since 
2 = (1 +i)(l — i). The Frobenius of E m acts on the 2-torsion of E m by fixing one 
of the three non-trivial points and by exchanging the other two. This can be 
seen by looking at the 2x2 matrix which represents the action of Frobenius on 
the £-adic Tate module when 1—2. The characteristic polynomial of Frobenius 
is t 2 + mt + q, where — m is the trace of the matrix and q is the determinant. 
In this case, q = x 2 + 1 and m = 2x, with x even since q is odd. Thus we have 
m = (mod 4). So the number of points on the elliptic curve over ¥ q , N(E m ), 
satisfies 

N(E m ) = q+ 1 + m = 2 (mod 4). 

Similarly, 

N(E m _ 2 ) =q + l + m-2 = Q (mod 4). 

In both cases, the trace is even and the determinant is odd, so the possibilities 
for the matrix of Frobenius (mod 2) are: 

" 1 
1 1 



1 1 
1 



1 

1 



and 



1 
1 
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The first three of these matrices act on the 2-torsion by fixing one of the three 
non-trivial points and by exchanging the other two. The last one is the identity 
matrix and fixes all three non-trivial 2-torsion points. But the identity matrix 
is only possible if N(E) = (mod 4), while the first three are possible in either 
case. This follows by writing the matrix with entries 

a b 
c d \ ' 

the number of points on E as 

N(E) = {ad - be) + 1 - (a + d), 

and considering all the possibilities for the entries (mod 4). 

So we only need to chose C to be an elliptic curve E m _ 2 with Frobenius 
fixing one of its 2-torsion points and switching the other two. It suffices to take 
an elliptic curve with endomorphism ring C R' such that 



It follows from Deuring that such a curve exists. By chosing C in this way we 
can find an isomorphism of C[2] with the kernel of b which respects the action 
of Frobenius. Finally, the Galois module isomorphism must be an anti-isometry 
with respect to the pairings. The pairings take values ±1. 

j=2 The proof is almost the same except in this case A = \[2 and the 
polarization on B is given by the matrix 




Again we have 

N{E m ) = q + 1 + m = x 2 + 3 + 2x = 2 (mod 4), 

and 

N{E m - 2 ) = q+l + m-2 = x 2 + l + 2x = (mod 4), 
since x is odd. So the same argument works. □ 

Corollary 3 If q = x 2 + j , j = 1 or j = 2 with j satisfying j < x, and q ^ 2, 
then there exists a curve of type ±[m, m, m — 2]. 

Proof: This follows from Theorem ^ and the fact that (see |l7| ) : if A is a 
principally polarized indecomposable abelian variety over an algebraically closed 
field, of dimension 3, then A is the Jacobian of a curve. The "precise Torelli" 
theorem in the Appendix to [|l3| allows you to descend from the algebraically 
closed field to any field at the cost of quadratic twist, as is explained there. 
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Example An example of a genus 3 curve corresponding to this type of glueing 
was found by van der Geer and van der Vlugt. It can be described as the curve 
over F27 obtained by taking the fiber product of 

y 2 = x 3 + 2x 2 + 2x 

with 

y 2 = 2x 3 + 2a A x 2 + a 8 x 

where a 3 + 2a 2 + 1 = 0. It is a defect 2 curve with 56 points (instead of 58 as 
stated in ||). 

4.3 Proof of Theorem || 

Let q = p e be a power of a prime. We divide the proof into two cases: e even 
and e odd. 

e even. First suppose e = 2r is even. Then Ibukiyama has shown || that, 
for p an odd prime, there exists a curve C of genus 3 over F p such that 

#C(F p2 .) = l+P 2r + (-l) r+1 6p r . 

Thus for all q an even power of an odd prime, there exists a genus 3 curve 
attaining cither the Weil maximum or the Weil minimum. 

Now suppose that p = 2, so that q = 2 2r . Then m — 2 r+1 , and (m — 1) is 
prime to p. If we let d! — (m — l) 2 — 4q, then 

d! = -2 r+2 + 1, 

and so we see that for r > 1, 

d'i {-3,-4,-8,-11}. 

By Theorem 8.2 in fj|, there exists an indecomposable, positive definite, uni- 
modular Hermitian module over R41 of rank 3. Applying the functor S from 
the Appendix to this module, we obtain an abelian variety isogenous to E m _i x 
E m —i x E m —i with an indecomposable principal polarization. Then by the 
Torelli theorem, (see the Appendix to there exists a genus 3 curve over ¥ q 
which is of type ±[m — l,m — l,m — 1]. 

For example, over F4, the equation of the Klein curve is given in p3| to show 
that A^(3) = 14. It is a curve of type [m— 1, m — X,m — 1]. 

e odd. Now suppose that e is odd. As usual, write 

q = x 2 + x + a, 

with —x < a < x. We divide the proof according to the value of d = m 2 — 4q. If 
d G {—3, —4, —8,-11}, then these cases have been treated in Theorems and 

I 
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If d is not in the set{— 3, —4, —8, —11}, we check whether m is prime to p. 
If it is, then a curve of type [to, to, to] or [— m, — m, — m] exists. If not, then 
(m — 1) is prime to p. It remains to check that 

d' = (m - l) 2 - 4q i {-3, -4, -8, -11}. 

Since 

d' = d - 2m + 1 

and 

d = or 1 (mod 4), 

this could only occur for d = — 7 and m = 1, but m > 1, so it does not 
occur. Thus there exists a curve of type [m — l,m — l,m — 1] or of type 
[— (m — 1), — (to — 1), — (to — 1)] in this case. 
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Appendice J-P.Serre, 1999 

Modules hermitiens et courbes algebriques 



1. Notations 

On note k un corps fini a q elements de caracteristique p. On se donne un 
entier a et Ton pose d = a 2 — Aq. On suppose: 

(1.1) a est premier a p; 

(1.2) d < 0; 

(1.3) d est le discriminant d'un corps quadratique imaginaire. 

On pose R = Z[X]/(X 2 — aX + q). Vu les hypotheses ci-dessus, R est 
l'anneau des entiers du corps quadratique imaginaire K = Q(Vd), dans lequel 
p est decompose. 

(L'hypothcse (1.3) n'est past indispensable pour la suite; il est souvent com- 
mode de ne pas la faire; on doit alors travailler avec des "ordrcs" non maximaux 
dc K.) 

On choisit une courbe elliptique E sur k dont les valeurs propres de Frobenius 
sont \(a± Vd) (son nombre de points est done q+ 1 — a). On sait qu'il en existe. 

2. La categorie Ab(a, q) 

On note Ab(a, q) la categorie des varietes abeliennes sur k ayant les proprietes 
equivalentes suivantes: 

(2.1) A est k-isogene a un produit de copies de E. 

(2.2) Si Fa et Va designent respectivement le Frobenius et le "Verschiebung" 
de A, on a Fa + Va — a dans End(A) . 

(2.3) Les valeurs propres de Fa sont celles de Fe, repetees g fois oil g = dim A. 

(Inequivalence de ces proprietes resulte de theoremes de Tate.) On aura besoin 
plus loin de la propriete suivante: 

(2.4) Si A, B appartiennent a Ab(a, q), et si f : A^> B est un homomorphisme 
defini sur une extension k' de k, alors f est defini sur k. 

En effet, on peut supposer que k' est une extension finie de k. Soit m > 1 
son degre. Puisquc / est defini sur k' , il commute a la puissance m-eme du 
Frobenius. Mais si ir est le Frobenius (i.e. le generateur "X" de R), l'anneau 
Z[7r m ] est un sous-anneau d'indice fini de R = %\k\. La commutation avec ir m 
entraine done celle avec 7r. 

3. Une equivalence de categories 

Notons Mod(i?) la categorie des i?-modules sans torsion de type fini (i.e. 
projectifs de type fini, vu que R est un anneau de Dedekind, grace a (1.3)). 
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Noter que R opere sur toute variete A dc Ab(A,q); de plus, d'apres (2.4), 
tout / : A — > B est un i?-homomorphisme. 

Si A e Ab(<z, q), notons T(A) le i?-module Hom(E, A). C'est un element de 
Mod(iZ). 

(3.1) Le foncteur T : Ab(A, q) — > Mod(R) est une equivalence de categories. 
On a en particulier un isomorphisme naturel: 

Hom(A,£?) = Hom fl (T(A),T(B)). 

On peut expliciter un foncteur S : Mod(i?) — > Ab(a, q) qui est "inverse" au 
foncteur T: si i S Mod(i?), on dcfinit S(L) comme la variete abelienne L®rE, 
"produit tensoriel" de L par E (de tels produits tensoriels existent dans toute 
categorie abelienne; on ecrit L comme conoyau d'un homomorphismc R N — > i? M 
et l'on definit L ®^ £7 comme le conoyau de l'homomorphisme correspondant: 
E N ^ E M ). 

Les assertions ci-dessus entrainent en particulier: 

(3.2) Toute variete abelienne A appartenant a A(a,q) peut s'ecrire sous la 
forme L ®# E avec L = Hom(E, A). 

(Dans ce qui suit, j'abregerai L ®r E en A L .) 
Bien stir, on a: 

(3.3) rang(L) = dimA L . 

(3.4) A R = E. 

Si M est un sous-module d'indice fini de L, l'inclusion M — > L dcfinit un 
morphismc / : Am — * Al qui est une isogenic, de plus: 

(3.5) Le degre de f est egal a (L : M). 

Exemple: le cas oil dim A = 1. 

Ce cas correspond a rang(L) = 1; autrement dit L est un i?-module in- 
versible. Les classes de tels modules correspondent aux elements dc C\(R) = 
Pic(ii); leur nombre est le nombre de classes h(d) de l'anneau R. On conclut de 
la que le nombre des classes d'isomorphisme de courbes elliptiques /c-isogenes a 
E est egal a h(d); on retrouve un resultat bien connu. 

4. Dualite 

Si A appartient a Ab(a,q) il en est de meme de sa duale A*, puisque A et 
A* sont fc-isogenes. 

Si L appartient a Mod(i?), notons R* son anti-dual, autrement dit Fensemble 
des homomorphismes / : L — > R qui sont anti-lineaires, i.e. tels que f(rx) = 
rf(x) pour r e R et x e L. 

Les foncteurs A A* et L L* se correspondent par le dictionnaire du §3. 
Autrement dit: 
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(4.1) Si A e Ab(a, q) correspond au module L, sa duale A* correspond au 
module L* . 

(Le fait que l'on prenne 1' anti-dual, ct non le dual, provient de ce que la trans- 
position sur End(£?) = R est la conjugaison complexe.) 

5. Polarisations 

Une polarisation est un morphismc <p : A — ► A* qui provient d'un diviseur 
ample sur A (cf. [14]). Si A correspond au module L, ip correspond par (4.1) a 
un morphisme L — > L* , autrement dit a une forme sesquilincaire H : L x L — > R. 
De plus: 

(5.1) H est une forme hermitienne deftnie > 0. 

(Autrement dit on a H (x, y) — conjugue de H (y, x) pour x,y € L, et H (x, x) > 
si x ^ 0.) 
Inversement: 

(5.2) Toute forme hermitienne deftnie > sur L deftnit une polarisation de A. 
Une polarisation tp a un degre deg(^) defini par: 

deg((p) 2 = ordre du schema en groupes fini Ker(<^). 
En termes de L et de la forme hermitienne h : L — > L* , ceci se traduit par: 

(5.3) deg(<p) 2 = (L* : hL). 
En particulier: 

(5.4) Pour que ip soit une polarisation principale (i.e. deg(<p) = 1), il faut et 
il sufftt que hL = L* (auquel cas on dit que H est i?-non degeneree, ou 
encore que le discriminant du module hermitien L est egal a 1.) 

Lorsque L est un i?-module libre (ce qui est toujours le cas si h{d) = 1) et 
qu'on en choisit une base (e^), la forme H est donnee par une matrice hermiti- 
enne (rij) et la condition que le discriminant soit 1 se traduit par det((ry)) = 1. 

6. Polarisations principales indecomposables 

Soit L G Mod(i?), muni d'unc forme hermitienne > de discriminant 1. Soit 
A la varietc abclicnnc polarisee correspondante. Vu le §5, on a: 

(6.1) Pour que A soit indecomposable (comme variete abelienne polarisee), il 
faut et il sufftt que L soit indecomposable comme module hermitien. 

Noter que, a cause de (2.4), la notion d'indecomposabilitc pour A a le mcmc 
sens sur k, ou sur toute extension de k. II s'ensuit qu'un module hermitien 
indecomposable donne une variete abelienne polarisee qui est "absolument" 
indecomposable. 

On peut donner des excmplcs d'anneaux R qui n'ont aucun module hermitien 
indecomposable (de discriminant 1) en dimension g egale a 2 ou 3. D'apres 
Hoffmann (cf [5]), ce sont: 
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(6.2) Pour g = 2, les cas d = -3, -4, -7; 

(6.3) Pour g = 3, les cas d = -3, -4, -8, -11. 

Hoffmann a egalement montre que, pour g = 2, 3 fes valeurs ci-dessus sont fes 
seules valeurs de d pour lesquelles tous fes modufes hermitiens de discriminant 
1 sont decomposables. 

7. Application aux courbes algebriques 

Ce qui precede s'appfique a fa jacobicnne J d'une courbe de genre g dermic 
sur k (et dont les valeurs propres de Frobenius sont ccllcs de E rcpctccs g fois). 
Comme J est munie d'une polarisation principale indecomposable, on deduit de 
la: 

(7.1) Pour g = 2,3 il n'existe aucune courbe C dont la jacobienne appartienne 
a Ab(a, q), si d — a 2 — Aq a I'une des valeurs donnees dans (6.2) et (6.3). 

Posons, comme d'fiabitude m = [2a 1 / 2 ] et supposons m^O (mod p). Sup- 
posons que le nombre N de points de la courbe soit egal ag+l + gm. On sait 
que J appartient alors a Ab(a,q), avcc a = —m. On deduit de la et de (7.1) 
que la courbe en question n'existe pas lorsque: 

g = 2, m 2 - Aq = -3, -4, ou - 7; 

g = 3, m 2 - Aq = -3, -4, -8, ou - 11. 

(Meme resultat si TV = q + 1 — gm, car cela ne fait que changer le signe de 

a.) 

Ainsi, par exemple, il n'existe aucune courbe de genre 3 sur F 2 7 ayant 58 
points, car une telle courbe donnerait d = —8. 

On peut aussi proceder en sens inverse, et utiliser des modules hermitiens 
indecomposables de rang 2 ou 3 pour construire (ou plutot pour prouver l'existence 
. . . ) de courbes. En effet, soit L un R- module hermitien indecomposable i?-non 
degenere de rang 2 (resp. 3). En appliquant le th. de Torclli a Al, on en deduit: 

(7.2) Si g = 2, il existe une courbe C sur k dont la jacobienne est isomorphe a 
Al (et qui a done q + 1 — 2a points). 

(7.3) Si g = 3, il existe une courbe C sur k dont la jacobienne est isomorphe, 
soit a Al, soit a la "tordue quadratique" de Al (et qui a done q + 1 — 3a 
points dans le premier cas et q + 1 + 3a points dans le second cas) . 

De plus, dans le cas g = 3, si la courbe consideree n'est pas hyperelliptiquc 
le cas "—3a" exclut le cas "+3a". Autre propriete de ce cas (consequence de 
Torelli, ici aussi): si C est la courbe consideree, supposee non hyperelliptique, 
son groupe d'automorphismes Aut(C) est un sous-groupe d'indice 2 de Aut(L); 
de facon plus precise, on a 

Aut(L) = {±1} x Aut(C). 
Par contre, si g = 2, ou si g = 3 et C est hyperelliptique, on a 

Aut(L) = Aut(C). 
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Exemple: Prenons q = 41, g = 3, a = ±m = ±12, de sorte que d = —20. 
D'aprcs Hoffmann, il y a deux possibilites pour L, avec chaque fois Aut(L) = 
{±1} x 5*3. D'ou l'existence de courbes de genre 3 sur F41, ayant soit 78 points 
(ce qui serait le maximum), soit 6 points (ce qui serait le minimum). Chacune 
de ces deux courbes a un groupe d'automorphismes qui est, soit {±1} x S3, soit 
S 3 . 

Remarque: On peut utiliser (7.2) et (7.3) pour demontrer certains cas de 

(6.2) et (6.3). Prouvons par exemple que, pour d = —8, g = 3, il n'y a pas 
de module hermitien indecomposable de discriminant 1. S'il y en avait un, par 

(7.3) applique a q = 3, a = 2, il y aurait: 

soit unc courbc C dont les valeurs propres de Frobenius sont 1 ± V^2 
(repetees 3 fois): son nombre de points serait q + 1 — 3a = 3 + 1 — 6 = —2, 
ce qui est impossible; 

soit une courbe dont les valeurs propres de Frobenius seraient les opposees 
des precedentes; sur F27, ce seraient —(1 ± \/^2) 3 = 5 ± et le nombre de 

points serait 27 + 1 — 30 < 0, ce qui est encore impossible! 



chere Kristin, 

Voici quclqucs complements sur le texte "Modules hermitiens ..." que je 
vous avais envoye en janvier. 

Un certain nombre d'enonces avaient ete laisses sans demonstrations. Je vais 
les reprendre: 

1. Le plus important est: 

(3.1) Le foncteur T : Ab(a, q) — > Mod(R) est une equivalence de categories. 
J'avais donnc une partie de l'argument, a savoir la construction d'un foncteur 

appele "S" qui transforme L <G Mod(i?) en la varietc abclicnnc Al = L®rE. 
Ce foncteur a des proprietes agreables, et faciles a demontrer, par exemple 

Hom(5(L), S{L')) = Rom R (L, L'). 

Cela montre deja que T o S est l'idcntite, et done que T est injectif. Pour 
montrer que S o T = 1 (avec un certain abus de notation!), on est ramene a 
prouver l'enonce: 

(3.2) Toute variete abelienne A £ Ab(a,q) est de la forme Al pour un L 
convenable. 

C'est la le point essentiel. II va resulter de: 

(3.6) Soit A^ B une isogenie dans Ab(a,q). Si B est de la forme Al, alors 
il en est de meme de A (pour un module L' convenable). 

(D'apres (2.1), A est isogene a E x • • • x E; on applique alors (3.6) a B = 
E x • • • x E, qui est de la forme Al, avec L = Rx ■ ■ ■ R.) 

Pour prouver (3.6), il nous faut controler les isogenies de varietes abeliennes, 
et c'est ici que l'hypothese "ordinaire" va etre essentiellc. II me faut rappeler 
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des choses connues. Plagons-nous d'abord sur un corps algebriquement clos k 
(on prcndra ensuite pour k une cloture algebrique du corps fini k). Soit A une 
variete abelienne sur k, de dimension n. Si I est un nombre premier ^ caract. k, 
on sait ce qu'est le /-ieme module de Tate Ti(A) de A: c'est la limite projective 
des points de /"'-division de A. C'est un Z;-module libre de rang 2n. Ce module 
"controle" les isogenics A' — > A de degre une puissance de I, au sens suivant: 
une telle isogenie correspond bijectivement a un sous Z;-module d'indice fini de 
Ti(A) (a savoir l'image de Ti(A') dans Ti(A)). Dans notre cas (k fini et k cloture 
algebrique de k), on voit en outre que les k-isogenies correspondent aux sous- 
modules de Ti(A) qui sont stables par Taction de Galois, i.e. par le Frobenius it: 
puisqu'on a suppose A e Ab(a, q), ccla vcut dire que le sous-module en question 
est stable par R. Finalement, on voit que les k-isogenies A' — > A qui sont de 
degre une puissance de I sont classifiecs par les sous ify-modules de Ti(A), ou 
Ri = R®Zi. Dans le cas particulier A = E, on constate que Ti(E) est un 
Ri-module libre de rang 1 (rcgardcr les rangs!). Si A est dc la forme Al, on 
constate aussi que Ti(A) = Ti(E) ®r L = Ti(E) <g> Li, ou le produit tensoriel 
est pris sur Ri et L\ designe Zj ® L = Ri ®r L. II est alors immediat que les 
.Rz-sous-modules de Ti(A) d'indice fini sont de la forme Ti(E) <g> L' ou L' est un 
sous-i?-module dc L d'indice une puissance de /, et l'on a alors A' = E ® L'. 
Autrement dit, I'enonce (3.6) est vrai si le degre de I'isogenie est de la forme 
l m avec I 7^ p. 

On est done ramene a regarder le cas ou le degre est une puissance de la 
caracteristique p, Evidemment, tout revient ici encore a controler les isogenies. 
Pour une variete abelienne quelconque, cela peut se faire au moyen d'un mod- 
ule de Dieudonne convenable. Heureusement, les varietes abeliennes qui nous 
interessent ici sont ordinaires, et cela simplifie beaucoup la situation. En effct, 
pour une telle variete A, on peut definir un "p-ieme module de Tate" T P (A) 
qui a exactement les memes proprictes que les Ti, a savoir: c'est un Z p -module 
libre de rang 2n = 2. dim(A), ct il controle les p-isogenies comme ci-dessus. Ce 
module est sommc dircctc dc deux modules de rang n: 

t p (A) = r p (4®r p (4 

(e= etale; «=infinitesimal). 

La partie etale T p (A) e est definie comme la limite projective des points de 
p m -division de A; la partie infinitcsimale T p (A)i peut sc definir comme lc Horn 
(dans la categorie des groupes formcls) de G m dans A, ou bien comme le Z p - 
dual de T p (A*) e , ou A* est la duale de A. On demontre que l'on a les memes 
proprietes que ci-dessus pour les T\. Noter que l'anneau R p = Z p ® R est egal 
a Z p x Z p (les deux facteurs etant caracterises par le fait que ir donne une 
unite dans le premier, et un element de l'ideal maximal dans le second). Cette 
decomposition de R p est compatible avec la decomposition en deux morceaux 
de T p (A), ainsi qu'avec le fait que toute p- isogenie se decompose en une isogenie 
etale et une isogenie radicielle. Bref, tout marche tres bien, et l'on arrive ainsi 
a demontrer (3.6) pour les p-isogenies. 

(Une autre facon de justifier (3.2) et (3.6) consiste a utiliser un resultat 
de Deligne (Invent. math. 8 (1969), 238-243) qui donne une equivalence de 
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la categorie des varietes abeliennes ordinaires sur F p avec la categorie des Z- 
modulcs libres de type fini munis d'un endomorphisme F ayant un certain nom- 
bre de proprietes raisonnables. 

Cet article de Deligne contient quelques references, mais pas beaucoup. La 
thcorie du T p des varietes ordinaires est connue depuis longtemps (voir par 
exemple mon article de l'Amer.J. 80 (1958), 715-739), mais n'interesse pas les 
specialistes, car elle est trop simple! Le cas amusant est le cas supersingulier, 
etudie en detail par Oort: on y trouve des families "continues" de p-isogenies.) 

2. II faut parler un peu de la dualite et des isogenics (§§ 4,5) L'enonce 

(4.1) nc presente pas de difficultcs. Le point esscntiel est que, pour la courbe 
elliptiquc E, le transpose /* d'un endomorphisme / dc E est egal au conjugue f 
de /, lorsqu'on identifie / a un element de R, qui est une extension quadratique 
dcZ. 

Passons aux polarisations. Soit p : A — > A* un morphisme, et supposons que 
A e Ab(a, q) soit associe au module L, auquel cas A* est associe a l'anti-dual 
L* dc L. Alors tp correspond a une application i?-lineaire h : L — > L* , ou, ce 
qui revient au meme, a une application scsquilineairc H : L x L — > R. 

Si tp est une polarisation, on a tp* — ip, ce qui se traduit par h* = h, ou 
encore par le fait que H est une forme hermitienne. 

Inversement, si H est une telle forme, il lui correspond tp : A — > A* avec 
p* = p. II en resulte (cf. Mumford, Abelian Varieties, p. 188, th. 2, et p. 189, 
Remarque) que tp est de la forme u ipo n pour un diviseur D sur A. Dire que 
tp est une polarisation equivaut a dire que D est ample. Pour prouver (5.1) et 

(5.2) je dois montrer que cela se produit si et seulement si H est deftnie > 0. 
Je peux remplacer A par une variete isogene. En effet, si A' — > A est 

une isogenie, le morphisme tp : A — > A* definit tp' : A' — > A' cn composant: 
A' — > A — > A* — > A'* , et il est facile de voir que tp est une polarisation si et 
seulement si tp' en est une. Meme invariance pour le fait que H soit definie > 0. 
Ceci permet de choisir pour A' le produit Ex ■ ■ ■ E = E n , auquel cas son dual 
est aussi E n , et tp est donnee par une matrice hermitienne (a^) a coefficients 
dans R. 

On applique alors un resultat qui se trouve dans Mumford (p. 210, lignes 4 a 
6). On peut aussi raisonner directement, en utilisant encore une autre isogenie 
pour se ramener au cas ou la matrice (<iy) est une matrice diagonale avec des 
entiers (di) sur la diagonale. Le fait que cette matrice donne une polarisation 
de E n si (et seulement si) les di sont > est immcdiat. 

Bicn a vous. 

J-P. Serre 
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